Help & information
Privacy Policy
Last updated: November 2026
This policy explains how JW Coffee Ltd ("JW Coffee", "we", "us") collects, uses and protects your personal data when you use our website and services. JW Coffee Ltd is a company registered in England and Wales under company number [00000000 — PLACEHOLDER], with its registered office at West Lancashire Investment Centre, White Moss Business Park, Skelmersdale, West Lancashire WN8 9TG. We are the data controller for that data, and we handle it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
Account details: your name, email address, phone number and password (stored only in hashed form).
Order details: your delivery address, the items you buy and the total you pay.
Payment details: limited information from our payment provider, Stripe — such as how you paid, whether the payment succeeded or was refunded, and Stripe's reference for it. We never receive your full card number or security code.
Support messages: anything you send us through the contact form or by email, including any photos you attach.
Usage data: pages viewed, products clicked, the site that referred you, your IP address and browser type — used for analytics, security and fraud prevention.
How we use it, and our lawful basis
To take payment for, process and deliver your orders and to send order confirmations, delivery updates and support replies — necessary to perform our contract with you.
To keep tax and accounting records — necessary to meet our legal obligations.
To keep the website secure, prevent fraud (including payment fraud) and improve our service — our legitimate interests in running a safe, useful shop.
To send marketing emails — only with your consent, which you can withdraw at any time using the unsubscribe link in any message.
Analytics and advertising cookies — only with your consent, which you can change at any time from Cookie settings.
Who we share it with
We do not sell your personal data. We share it only where we need to:
Delivery partners — Royal Mail and Evri, whichever you choose at checkout — to get your order to you. They receive your name, delivery address, phone number and email address so they can deliver your parcel and send you tracking updates.
Stripe (Stripe Payments Europe, Limited and Stripe Payments UK, Ltd.) — our payment provider. When you pay by card, Apple Pay or Google Pay, we share the order amount, your name, email address and billing details with Stripe so it can process your payment and help prevent fraud. You enter your card details on Stripe's secure payment page, so they never reach our servers. Stripe acts as an independent controller for some of this data — for example for fraud prevention and to meet its own legal obligations. See Stripe's privacy policy for how it uses your data.
Service providers who host our website, send our emails and provide analytics, acting on our instructions.
Professional advisers, and authorities such as HMRC or the police, where UK law requires it.
Some of our service providers, including Stripe, may process your data outside the UK — for example in the European Economic Area or the United States. Where they do, appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
We keep your account details for as long as your account is open. Order and payment records are kept for as long as UK tax and company law requires — usually six years. Support messages are kept for as long as we need them to resolve your query and handle any follow-up.
Data security
All communication with our website is encrypted using HTTPS/TLS, and passwords are hashed using bcrypt. Card, Apple Pay and Google Pay payments are handled by Stripe, a PCI DSS Level 1 certified payment provider: you enter your card details on Stripe's secure payment page, so they are never entered on, sent to or stored by our site.
Your rights
Under UK GDPR you have the right to:
Access the personal data we hold about you and receive a copy of it.
Have inaccurate data corrected — you can update most details yourself in My Account.
Have your data erased, or its use restricted, where there is no reason for us to keep using it.
Object to our use of your data based on legitimate interests, and to direct marketing at any time.
Receive the data you gave us in a portable format.
Withdraw your consent at any time, where we rely on it.
To exercise any of these rights, email privacy@jwcoffee.co.uk. We will respond within one month.
Cookies
We use essential cookies and browser storage to keep you signed in and remember your basket — these don't need your consent. With your permission, we also use analytics cookies (Google Analytics and our own first-party analytics, which store a random visitor identifier in your browser) and, if enabled, advertising pixels from Meta, TikTok and X, to understand how the site is used. When you pay, Stripe's payment page — run by Stripe, not us — uses its own cookies to process your payment securely and prevent fraud. You can accept or decline our optional cookies in our cookie banner and change your choice at any time from the Cookie settings link in the footer.
You can also block or delete cookies in your browser settings, but parts of the site may not work as expected without the essential ones.
Complaints
If you have a concern about how we handle your data, please contact us first at privacy@jwcoffee.co.uk and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
Contact
Questions about this policy? Email privacy@jwcoffee.co.uk.